CHX-I Rules

disable spi in jetico

if stem can help as i'm using CHX-I ,how do i disable jetico's 'TCP/UDP spi' mode.i want to use jetico for application control only but i found that whenever i uncheck spi,i can't get access to internet.if it impossible to disable the SPI mode,then how can i implement or put CHX-i to work with jetico.rightnow i disable SPI mode in CHX-I but left the rest of the rules untouch(i'm using bind-pe rulesset)

sorry,i happened to read stem post #261.i guess stem also tried to do it this way but failed.btw stem,what rules for blocking incoming can i turn off if i'm using CHX-I. at the moment i had turn off 'BLOCK ALL NOT PROCESSED PROTOCOL PACKETS' ,'BLOCK ALL NOT PROCESSED IP PACKETS','DROP BAD PACKETS','DENY ALL FRAGMENTED PACKETS','DENY TCP W/O FLAG','DENY TCP W/ FLAG'.

 

Re: Jetico making me crazy.

Hi Korb,
I am just having another look into this now...

 

Re: Jetico making me crazy.

thanks, i'm still with CHX-i 2.8 .i'm not sure v3.0 is for free or not.

 

Re: Jetico making me crazy.

Hi Korb,
I have attached a simple rule that will block/allow network access. (allow all or deny all)
Download the rule, remove the "txt" extension, and then load into Jetico. Apply the policy. Then on the popup, just select "allow this activity" or "deny this activity"

CHX-I V3 is free

 

Re: Jetico making me crazy.

thanks stem for quick reply.btw how can i retain the rules for tcp/ip outbound connections. for exp i allowed program to have access to net but i want to control which IP it connect to.just like the default rules.i know what i mean.

 

Re: Jetico making me crazy.

I thought you where using CHX-I for that?, and only using Jetico for net access.

 

Re: Jetico making me crazy.

so sorry again, try to learn setting the rules,i guess i somehow got it.i just changed it to monitor any outbound connection. that should fix it.

btw, the position of rules doesen't matter much right?

 

Re: Jetico making me crazy.

Hi Korb,
You should have the SPI set up in CHX-I (on the interface), this will then monitor the IPs

 

Re: Jetico making me crazy.

i use chx-i for inbound only .i not sure how to set it for outbound .

 

Re: Jetico making me crazy.

What are your current rules for CHX-I?

 

Re: Jetico making me crazy.

just installed ver 3

now i qutie confused with the new payload rules.i now searching for the chx-i thread to see anyone can help on the rules setting.i import the bind-pe rules but seem it log say does not match allow policy. btw when i right click to set the spi mode,i can't see the apply or ok button.i can't even resize it window size.

 

my current rules

http://www.picshosted.com/c/24313/ScreenShot001.th2.jpg

what rules do i need.pls teach me ok.thanks

 

http://www.picshosted.com/c/24314/ScreenShot003.th2.jpg


another rules with standard filter. i tried combing the bind-pe and standard rules.any un wanted rules to leave out pls let me know as i'm learning

 

Can you post "screen shots" or details of the rules?

 

funny i got this 'does not match allowed policy' with the standard rules above.

http://www.picshosted.com/c/24315/ScreenShot004.th2.jpg

 

can i upload the standard file here.

 

this is the bind-pe filters . i still have a spoofed filter and workstation filters.i just can't remember where i download them.

 

i know this is kind of silly and un related question but still had to ask. i can't even get to the apply/ok button.the window is too long and can't resize.

can i leave the 'arp inspection' uncheck.cause i can't apply to it.

sorry screenshot deleted.

 

I will install CHX,...

I have installed, most of the rules are just blockers (ingress/spoof),.. are you behind a router, or on a network?

By the way,... If you are just going to use these default rulesets within CHX,.. you would do as well to use jetico on default config, with the ingress / spoofed IPs within the blocked zone.

 

For CHX:

Read this topic: https://www.wilderssecurity.com/showthread.php?p=790731#post790731

 

้hi stem, i'm behind a router.if i use the default rules in CHX-I and use rules for inbound in jetico,will that be redundant or slow down in internet?

 

Hi Korb,

For your router,.. check the default "Ingress" rules you have loaded for CHX, as the "ingress" rules contain "Private Lan addresses" (such as 192.168.1.0/24) which can cause problems (make sure your Lan IP is not blocked).
Using the packet filtering on both firewalls may cause some slowdown. I havent seen any conflicts between the 2, but they would both be processing the same packets.

 

thanks stem.but i reinstalled chx-i 2.8 cause version 3 i just can't resize the properties window for spi mode.i use back the standard filters ,switch off spi mode and switch off some rules in jetico which is cover by chx-i. although i can switch to default setting but i will just play around.the slowness using 2 filter rules in 2 firewall is abt fews second.

btw,does anyone had a set of ip list which i can add to in chx-i?thanks

 

korb,

did you saw my post?

 

yes,but your post is regarding 'out of connection' am i right. about the attached file 'wan.zip' i cant download it.blank window open without any download promt.btw i put my screenshot up.i can't use verion 3 as the properties window can't be resize. so i can't click the apply button when i check the spi mode.



so now i'm back to v2.8

so do you have a list of ip to block?